Continue working on htaccess...

pyrosember

Newbie
Joined
Oct 19, 2021
Messages
10
Reaction score
0
Hi!! I have got a huge problem with CSP values in WordPress, the browser is showing policy errors with scripts and CSS, it's because a lot of core js scripts are done inline One of the solutions is adding unsafe-inline, but it seems to be a hack hole to xxs attacks. Other solution is add a hash code to only allow scripts with this code or do it dynamic, how can I add this rules in functions and scripts of wordpress??
 
Hi!! I have got a huge problem with CSP values in WordPress, the browser is showing policy errors with scripts and CSS, it's because a lot of core js scripts are done inline One of the solutions is adding unsafe-inline, but it seems to be a hack hole to xxs attacks. Other solution is add a hash code to only allow scripts with this code or do it dynamic, how can I add this rules in functions and scripts of wordpress??
Solved, adding x-xxs-protection for old browsers mitigate unsafe-inline.
 
Back
Top